A recent internal memo obtained by Bloomberg has disclosed that Microsoft employees in China will be required to utilize an iPhone for authentication starting in September. Android phones will not be permitted for use as multi-factor authentication devices. When accessing Microsoft systems, employees must use a smartphone along with two Microsoft apps for logging in.
When the new regulations go into effect in under two months, iPhone devices will need to have the two Microsoft apps installed – the Microsoft Authenticator password manager and the Identity Pass app. Microsoft mandates multi-factor authentication to prevent security breaches. The implementation of the new regulations will affect numerous Microsoft employees based in Mainland China.
According to Microsoft’s memo, Android phones cannot be used for multi-factor authentication due to restrictions on running Google services in China. This results in Microsoft employees being unable to access the Google Play Store, leaving the Apple App Store as the sole option for downloading necessary security apps. The fragmentation of Android app storefronts in China, caused by the ban on Google services, has led phone manufacturers in the country to develop their own app stores. Among these manufacturers are Huawei and Xiaomi.
Microsoft employees in China who own an Android phone will be required to buy an iPhone 15 for a one-time payment. iPhones will be available at various locations in China and in Hong Kong, where Google services are permitted. However, Microsoft staff in China can still use their personal Android phones.
The company has been targeted by hackers in multiple state-sponsored attacks. In January, a Russian-linked attack impacted several U.S. government agencies, including the State Department. In response to pressure from U.S. lawmakers, Microsoft launched the Secure Future Initiative (SFI) company-wide in November. SFI will utilize AI to quickly address cloud vulnerabilities, enhance security measures to prevent credential theft and implement automatic multi-factor authentication for employees.
This leads us back to the internal memo informing Microsoft employees on the Mainland that they are required to use an iPhone while at work.
